feedback

Author: brendan-kellam

.github/workflows/_build.yml

@@ -3,6 +3,8 @@
 # This workflow builds Docker images for linux/amd64 and linux/arm64 platforms,
 # pushes them by digest to GHCR, signs them with cosign/Sigstore for supply chain
 # security, and uploads build artifacts for subsequent manifest creation.
+#
+# @ see: https://docs.docker.com/build/ci/github-actions/multi-platform/#distribute-build-across-multiple-runners
 
 name: Build Multi-Platform Images
 

.github/workflows/release-dev.yml

@@ -3,9 +3,6 @@ name: Release Sourcebot (Development)
 permissions:
   contents: read
 
-# This workflow is a modification of a example.
-# @ see: https://docs.docker.com/build/ci/github-actions/multi-platform/#distribute-build-across-multiple-runners
-
 on:
   push:
     branches: ["main"]

.github/workflows/release-prod.yml

@@ -1,5 +1,8 @@
 name: Release Sourcebot (Production)
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
     inputs: